Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa
File: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (raw, json)
Hash identifier: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=
Subject key identifier: D5:54:4B:24:A5:3F:89:2F:89:E6:1A:69:DA:04:A5:A4:74:CA:26:B3
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 019427B5EE7A575608BE864B82136770D392
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 163.9.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ee:7a:57:56:08:be:86:4b:82:13:67:70:d3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5544b24a53f892f89e61a69da04a5a474ca26b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:19:1f:56:98:45:31:54:76:c6:49:dc:1a:
78:8a:c1:64:bf:b3:49:ec:1c:f7:c0:d2:ef:ce:52:
7d:63:1b:93:1e:19:2c:6d:b0:8a:f1:62:9c:34:32:
31:98:88:01:47:8b:5e:85:27:fc:eb:17:c2:c8:c5:
9b:ea:56:a6:d5:41:32:ea:55:a6:b4:77:60:95:77:
27:ef:06:19:02:af:44:ed:00:cc:42:8b:69:7b:b5:
50:fa:00:89:a2:a5:38:5a:66:8f:64:8a:2c:11:f7:
b6:bd:62:6d:3d:26:10:e3:b3:32:94:4e:52:5f:a1:
51:02:2e:4a:93:ea:40:22:d5:34:c1:7a:39:88:d0:
4e:a4:cd:86:c4:d8:f2:c8:f7:80:5d:25:f4:b6:5a:
26:cd:82:db:ac:9f:6a:0f:81:8b:48:12:94:66:4f:
15:64:db:2e:0f:97:cf:5d:c0:c5:96:f2:f4:70:16:
83:3b:45:bb:84:3a:49:05:35:85:c9:6c:8f:15:52:
f2:cf:3b:58:6a:71:ea:cb:e1:01:de:ff:1f:7f:88:
2d:44:c5:35:65:64:07:9e:34:2b:1a:6e:a0:a4:4c:
6f:4d:24:27:5e:30:ea:23:78:a0:5c:11:b0:28:80:
b4:e6:ee:be:93:dc:52:d3:71:80:0e:70:38:6d:a7:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:54:4B:24:A5:3F:89:2F:89:E6:1A:69:DA:04:A5:A4:74:CA:26:B3
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.9.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:b1:e3:f3:48:3c:fc:3d:be:41:2b:93:5f:91:2a:0c:ac:8e:
be:74:13:2d:99:df:9b:78:0f:0b:94:cd:4b:ce:4a:09:69:a9:
af:78:24:d6:92:fa:64:02:3d:9e:0f:c7:e1:a1:02:d3:1d:1f:
9a:20:5f:59:ae:cb:7c:c9:5d:cd:64:0e:0c:ab:5d:b9:4f:aa:
51:26:9d:03:e9:05:11:7e:a3:e1:61:38:4e:d4:ef:78:35:50:
cb:83:52:6c:51:4f:9f:10:b3:6f:aa:bd:b2:2f:b9:b7:46:8b:
84:52:39:41:bd:d3:2f:52:9e:12:91:d1:63:2e:e7:31:a7:e4:
66:98:bf:61:6c:ab:49:4c:a1:c5:ee:2d:77:05:0a:32:c4:e0:
7f:47:99:e6:dc:eb:44:47:82:b9:8d:37:91:10:f3:9f:2b:49:
6d:8a:f7:20:af:9a:ec:6d:3b:65:ea:83:52:f7:a1:cb:19:84:
73:03:c7:fa:b8:9d:28:16:89:cd:75:44:99:d2:c2:89:99:2e:
d8:fa:22:74:69:a3:a7:c8:99:91:19:1c:4d:27:24:4b:c1:ba:
39:77:be:a2:33:3a:ec:a4:b0:92:90:c2:00:85:5d:45:d1:26:
ac:9a:33:95:32:4e:ad:00:ba:0a:1d:97:f4:b6:5f:9c:31:ca:
49:8d:48:c2
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQnte56V1YIvoZLghNncNOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTVhZGQ4NmJhZjZiMmQwNmZmNDFmNTUyNmQzNDdmNzFl
ZWI0MTAwHhcNMjUwMTAyMTU1MDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTU0NGIyNGE1M2Y4OTJmODllNjFhNjlkYTA0YTVhNDc0Y2EyNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYEZH1aYRTFUdsZJ3Bp4isFkv7NJ
7Bz3wNLvzlJ9YxuTHhksbbCK8WKcNDIxmIgBR4tehSf86xfCyMWb6lam1UEy6lWm
tHdglXcn7wYZAq9E7QDMQotpe7VQ+gCJoqU4WmaPZIosEfe2vWJtPSYQ47MylE5S
X6FRAi5Kk+pAItU0wXo5iNBOpM2GxNjyyPeAXSX0tlomzYLbrJ9qD4GLSBKUZk8V
ZNsuD5fPXcDFlvL0cBaDO0W7hDpJBTWFyWyPFVLyzztYanHqy+EB3v8ff4gtRMU1
ZWQHnjQrGm6gpExvTSQnXjDqI3igXBGwKIC05u6+k9xS03GADnA4baeiuwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFNVUSySlP4kvieYaadoEpaR0yiazMB8GA1UdIwQY
MBaAFAOVrdhrr2stBv9B9VJtNH9x7rQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMt
Y2ZjNGE2NzZkNmUwLzEvMVZSTEpLVV9pUy1KNWhwcDJnU2xwSFRLSnJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMtY2ZjNGE2NzZkNmUw
LzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAowkwDQYJ
KoZIhvcNAQELBQADggEBADix4/NIPPw9vkErk1+RKgysjr50Ey2Z35t4DwuUzUvO
Sglpqa94JNaS+mQCPZ4Px+GhAtMdH5ogX1muy3zJXc1kDgyrXblPqlEmnQPpBRF+
o+FhOE7U73g1UMuDUmxRT58Qs2+qvbIvubdGi4RSOUG90y9SnhKR0WMu5zGn5GaY
v2Fsq0lMocXuLXcFCjLE4H9Hmebc60RHgrmNN5EQ858rSW2K9yCvmuxtO2Xqg1L3
ocsZhHMDx/q4nSgWic11RJnSwomZLtj6InRpo6fImZEZHE0nJEvBujl3vqIzOuyk
sJKQwgCFXUXRJqyaM5UyTq0Augodl/S2X5wxykmNSMI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net